Method for operating a highly available system with failsafe functionality and highly available system with failsafe functionality

摘要

The method involves operatively connecting sensor input data units (S1-S4) and actuator units (A1-A3) with the control units (1-4). One of the control units is set as an active control unit and other control units are set as passive control units. The actuator units are controlled using output data of active control unit, if the output data of active control unit coincides with output data of passive control units. A new active control unit is set, if the output data of active control unit does not coincide with output data of passive control units. An independent claim is included for fail safe system.